Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-84596

No fix known EPSS <1%CVSS 6.5

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory.

Published 2026-09-14 · CVE record · OSV

Products: Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple visionOS, Apple watchOS